From what I can tell in their s2n code, the canary was/is already TLS.

		revelation on Nov 22, 2017 \| parent \| context \| favorite \| on: Better Random Number Generation for OpenSSL, Libc,... From what I can tell in their s2n code, the canary was/is already TLS.